BaseFortify

Publication date: 2026-01-07

Last updated on: 2026-01-08

Assigner: S21sec

Description

An attacker with the ability to interact through the network and with access credentials, could, thanks to the unsecured (unencrypted) MQTT communications protocol, write on the server topics of the board that controls the MQTT communications

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-07

Last Modified

2026-01-08

Generated

2026-07-06

AI Q&A

2026-01-07

EPSS Evaluated

2026-07-05

NVD

CVE-2026-22535

EUVD

EUVD-2026-1194

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-1366

Attack-Flow Graph

Executive Summary

This vulnerability involves an attacker who can interact through the network and has access credentials. Due to the MQTT communications protocol being unsecured and unencrypted, the attacker can write to server topics on the board that controls MQTT communications.

Impact Analysis

The vulnerability allows an attacker to write to MQTT server topics, potentially leading to unauthorized control or manipulation of the MQTT communications. This could result in compromised system integrity, unauthorized actions, or disruption of services relying on MQTT communications.

Hi! I’m here to help you understand CVE-2026-22535. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70